News for hackers. Stuff that matters.

A comment on Router Security. Parent comment

Re:Router Security by whyoh on Saturday July 30, 2022 @09:10AM (#32286503)
Right. But isn't it so that each device gets its own IPv6 public address? So that PC1 and PC2 connected through the same modem are identifiable by different IPs, while you can still see that they're from the same modem/household? If that's the case, it can be a privacy concern.
[ Parent | on HN ]
Re:Router Security by tommiegannert on Saturday July 30, 2022 @09:17AM (#32286551)
Theoretically, even non-router devices could use more than one address, just to confuse what's listening on the other side.

In that scenario, DHCPv6 would be responsible for keeping the assigned subnet filled randomly, rather than being conservative and consistent with address assignments. I don't know if anyone is doing it now, but I don't think we should dismiss IPv6 for this reason.

[ Parent | on HN ]
Re:Router Security by megous on Saturday July 30, 2022 @12:40PM (#32288118)
Android doesn't respect/implement DHCPv6. But there are IPv6 privacy extensions that periodically rotate the IPv6 addresses of the device.

https://datatracker.ietf.org/doc/html/rfc4941

[ Parent | on HN ]
Re:Router Security by tommiegannert on Tuesday August 02, 2022 @03:32AM (#32316052)
Thanks for the reference! Doing that directly with SLAAC is of course even nicer.
[ Parent | on HN ]